Collaborate Disseminate
The Senate’s use of the end-to-end encrypted messaging app Signal is a good first step in protecting U.S. democratic institutions, but much more needs to be protected. Continue reading Senate’s Use of Signal A Good First Step, Experts Say
Researchers claim that APT3, widely believed to be a China-based threat actor, is directly connected to the Chinese Ministry of State Security (MSS). Continue reading APT3 Linked to Chinese Ministry of State Security
DocuSign warns of a breach and subsequent theft of email addresses that are part of a phishing campaign that employs malicious macro-laced Word documents. Continue reading DocuSign Phishing Campaign Includes Hancitor Downloader
Researchers at DefenseCode claim a vulnerability in Google’s Chrome browser allows hackers to steal credentials and launch SMB relay attacks. Continue reading Chrome Browser Hack Opens Door to Credential Theft
WikiLeaks released details on what it claims are two frameworks for malware samples dubbed AfterMindnight and Assassin, both allegedly developed by the US Central Intelligence Agency. Continue reading WikiLeaks Reveals Two CIA Malware Frameworks
A new malware family called Jaff has been identified by researchers who say they are currently tracking multiple and massive spam campaigns distributing the malware via the Necurs botnet. Continue reading New Jaff Ransomware Part Of Active Necurs Spam Blitz
Researchers take a deep dive analysis on a recently discovered database of more than 500 million username and password pairs. Continue reading Anti Public Combo List Analysis Reveals Password Habits Improving
Microsoft gets a lukewarm response with its new Microsoft Security Guides that replaced Security Bulletins. Continue reading Microsoft’s New Security Update Guides Get Mixed Reviews
Google said a permissions flaw that puts Android users at heightened risk of malware, ransomware and adware attacks will not be fixed until the release of its next mobile OS, Android O. Continue reading Android Permissions Flaw Will Linger Until O Release
Microsoft patched three zero day vulnerabilities actively under attack today as part of its May Patch Tuesday release. Continue reading Microsoft Plugs Three Zero Day Holes as Part of May Patch Tuesday